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Instructions: The information contained in this document is COMPANY CONFIDENTIAL and may not be disclosed to others without prior 
authorization. Submit this disciosure to the HP Legal Department as soon as possible. No patent protection is possible until, a patent application is 
authorize d, prepared, and submitted to the Government : 



Descriptive Title of Invention: HTTP Cookie Proxy 



Name of Project; Universal Session Manager 




Product Name or Number: Total*e-Mobile 



Was a description of the invention published, or are you planning to publish? If so, the date(s) and publication(s): 
REDACT 

Was a product including the invention announced, offered for sale, sold, or is such activity proposed? if so, the date{s) and locafon(s): 
REDACT 



Was the invention disclosed to anyone outside of HP, or will such disclosure occur? if so, the date(s) and name(s): 
REDACT 

if any of the above situations will occur within 3 months, call your tP attorney or the Legai Department now at 1 -898-491 9 or 970-898^919. 



Was the invention described in a lab book or other record? If so, please identify (lab book #, etc.) 
REDACT 



Was the invention built or tested? If so, the date: 

Yes, it was built in REDACT tested through REDACT 



and released in the Total-e-Mobile 1.0 product in REDACT 



Was this invention made under a government contract? If so, the agency and contract number: 
REDACT 



Description of Invention: Please preserve all records of the invention and attach additional pages for the following. Each additional page should 

be signed and dated by the inventors) and witness(es). 
K Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; eta) 

B. Advantages of the invention over what has been done before. 

C. Problems solved by the invention. 

P. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.). 



Signature of Inventor(s): Pursuant to my (our) employment ^eenrfent, I (we) submit this disciosure on this date: [ REDACT I 

REDACT jphnft/toitelli ^^1^^ " ? 

Employee No. Name / j^v&fatS^ 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name Signature Telnet Mailstop Entity & Lab Name 
(if more than four inventors, include additional information on another copy of this form and attach to this document) 
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Signature Of Witness (es): (Please try to obtain the signature of Hie person(s) to whom invention was first disclosed.) 

I he invention was first explained to, and understood by, me (us) on this date: [ redact 


1 


Full Name Signature 


Date :of Signature 
REDACT 


Full Name Signature 


Dateoi Signature 



Inventor & Home Address information: 


(If more than four inventors, include dddi information on a copy of this form & attach lo this document) 


Inventor's Full N3me 






John Joseph Mazzitelli 






Street 

REDACT 


City 

REDACT 


State 
REDACT 


Zip 

REDACT 


Do you have a Residential P.O. Address? P.O. BOX 


City Stale 


Zip 


Greeted as (nickname, middle name, etc.) 


Citizenship 

United Slates of America 





Inventor's Full Name 




Street 


City 






Stale 


Zip 


Do you have a Residential P.O. Address? P.O. BOX 


City 




State 


Zip 


Creeled as (nickname, middle name, etc.) 




Citizenship 






Inventor's Full Name 


Street 


City 






Stale 


Zip 


Do you have a Residential P.O. Address? P.O. BOX 


City 




Sta'te 


Zip 


Greeted as (nickname, middle name, etc.) 




Citizenship 






Inventor's Full Name 


Street 


City 






Stale 


Zip 


Do you have a Residential P.O. Address? P.O. BOX 


City 




Slate 


Zip 


Greeted as (nickname, middle name, etc.) 




Citizenship 
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Description of Invention: Please preserve all records of the invention and attach additional pages for the following. Each additional page should 

a be signed and dated by the inventor(s) and witness(es). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

The HTTP Cookie Proxy is a component that is housed inside' of the Universal Session Manager-product which sits between a remote client 
device and a web server. The Universal Session Manager and its internal HTTP Cookie Proxy component is currently implemented as a 
customized listener that plugs into the HP Blueslone Universal Listener Framework (ULF). The algorithm is as follows: 

1) Accept HTTP requests from the client device (e.g., a WAP phone) 

2) Extracts a unique client identifier from thai HTTP request that uniquely identifies the remote client 

3) Adds any cookies belonging to that client to the request via an HTTP cookie header. 

4) Forwards the request (with the new HTTP cookie headers) to a web server. 

5) When the web server returns the HTTP response, the component will parse that response and extract all HTTP set-cookie headers. If any 
set-cookie headers are found, those cookies are stored in a cookie storage area for later retrieval when the client submits future HTTP requests 
(i.e. used in step 3). 

6) The HTTP Cookie Proxy passes the response unaltered back to the client 

Other than adding cookie headers to the forwarded HTTP request, no other modifications are made to the request and, no modifications are 
performed on the web server's HTTP response. By default, the cookies are stored in-pfbcess; that is to say, they are stored in the same Java 
Virtual Machine memory space as the HTTP Cookie Proxy. It is conceivable that you might want to store this cookie information in persistent 
storage (like a file system or database) for better fault tolerance. The HTTP Cookie Proxy has, therefore, been designed to allow for an 
• implementation that does these things to plug in seamlessly. 

FIGURE A. 
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FIGURE A shows an example of how the Universal Session Manager (which houses the HTTP Cookie Proxy components) could be used to 
facilitate requests between a WAP phone and an HP Bluestone Universal Business Server(UBS) application. 
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FIGURE B. 




FIGURE B illustrates the Request Scenario - that is, the flow diagram [hat indicates how an HTTP request from a client- device flows through 
the HTTP Cookie Proxy to its final destination, that being a v/eb server or applicalion server 
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FIGURE C. 




FIGURE C illustrates the Response Scenario - that is, the flow diagram that indicates how an HTTP response from a web or application server 
flows through the HTTP Cookie Proxy back to its requestor, that being a remote client device. 



B. Advantages of the invention over what has been done before. 

Without using this HTTP Cookie Proxy, some client devices cannot maintain stale information and thus couid not access certain web and/or 
application servers. The advantage to using this component is that now a device which previously had been unable to effectively use certain 
web' arid application servers can now do so without failure. Another advantage is that the HTTP Cookie Proxy can be added to an application 
deployment without the application developer or the client device knowing that it is involved in the interaction between client and server. 
Therefore, it can be added to an existing or future application deployment without requiring additional coding effort to be expended. It snaps in 
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seamlessly and invisibly to the client and server programs. 



C. Problems solved by the invention. 

Some client devices do not have the capability to store HTTP cookies. This can lead to problems since some web and Application Servers pass 
cookies to clients in order to maintain session and state:- information between requests - without the ability to store cookies on a per-client basis, 
stale and session information cannot be maintained across multiple requests from the same clienL The HTTP Cookie Proxy works around this 
problem by providing a mechanism by which the cookie information is no longer required lo be stored in the client device. 



D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.).- 

A prior solution would be to force the web/application server developer to encode the cookie information in the returned anchor and form action 
URLs The disadvantage to this is that'll requires additional work on the application developer to specifically code their applications to do this 
additional specialized handling for the specific devices that cannot handle cookies. Another disadvantage is that the URLs, themselves may 
grow too long in length, depending on how the-cookie information is encoded on the URL. Some devices may not or can not display or accept 
URL strings longer than a certain length. If that length is exceeded, the client, will again be rendered useless with respect to its ability to interact 
with the web or application server. 



REDACT 



